Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A security update for OpenSSH on Rocky Linux 8 addresses several vulnerabilities, including improper validation and character encoding issues, with enhancement…
Debian announces multiple security vulnerabilities in the expat XML parsing library, affecting various aspects leading to denial of service or arbitrary code e…
The Fedora update for ProFTPD includes a new module, mod_procfs, enabled by default to fix an ACL bypass vulnerability, enhancing security and configuration ea…
Fedora released an update for WordPress 6.9.5, addressing critical security vulnerabilities including SQL injection issues and potential remote code execution …
Fedora 43 has released WordPress version 6.9.5, addressing security vulnerabilities including SQL injection and remote code execution issues. Users can update …
A security update for perl-IO-Compress affecting Rocky Linux 8 addresses a vulnerability allowing arbitrary code execution, highlighted by CVE-2026-48962, with…
An important security update for perl-Archive-Tar on Rocky Linux 8 addresses a path traversal vulnerability allowing arbitrary file access, with a CVSS score o…
An important update for nginx in Rocky Linux 9 addresses a critical buffer overflow vulnerability, ensuring better security and stability through bug fixes and…
A significant security update is available for plexus-utils on Rocky Linux 9, addressing a directory traversal vulnerability (CVE-2025-67030) with a CVSS score…
An important security update for PipeWire in Rocky Linux 10 addresses a sandbox escape and arbitrary code execution vulnerability (CVE-2026-5674), with a CVSS …
Rocky Linux 10 has released an important security update for the rest package, addressing weak random number generation in the PKCE implementation (CVE-2026-16…
A significant security update for libXfont2 has been released for Rocky Linux 10, addressing multiple vulnerabilities with a CVSS base score of 7.3 for each.
An important kernel update for Rocky Linux 10 addresses security vulnerabilities and includes bug fixes and enhancements with detailed CVSS ratings available o…
The Fedora update for perl-HTTP-Date version 6.08 addresses a security issue by rejecting overly long input in parse_date(), preventing denial of service from …
Rocky Linux 10 has released a critical security update for gstreamer1-plugins-bad-free, addressing two vulnerabilities, including heap overflows and buffer ove…
A significant Ruby security update for Rocky Linux 9 addresses vulnerabilities including IMAP command injection and TLS bypass, with two CVEs rated 7.1 and 7.4…
A security update for python-urllib3 on Rocky Linux 8 addresses an information disclosure vulnerability (CVE-2026-44431), rated with a moderate severity score …
SUSE released a security update addressing CVE-2026-12610 vulnerability in sssd, which could lead to a use-after-free issue, affecting multiple SUSE Linux prod…
SUSE announced an important security update for python-ujson on July 29, 2026, addressing CVE-2026-44660, which can lead to memory leaks in specific conditions.
SUSE released an important security update for python-ujson to address CVE-2026-44660, which resolves memory leaks caused by failure to decrement serialized JS…
A security update for PackageKit addresses CVE-2026-10294, which involves improper authorization due to argument manipulation. Installation is recommended for …
SUSE released a moderate security update for PackageKit addressing CVE-2026-10294, which involves improper authorization. Users are recommended to apply the pa…
SUSE released a moderate security update for PackageKit addressing CVE-2026-10294, which involves improper authorization due to argument manipulation, applicab…
SUSE released a security update for OpenVPN addressing two vulnerabilities that enable denial of service attacks, impacting multiple SUSE products. Users are a…
